villain/baiduapi
The MIT license, tests, and matching repository make the package easy to inspect. Its small footprint and lack of install scripts reduce avoidable adoption risk.
42%
Total Score
25
71
75
Health Score Breakdown
This is the only release, published about 6 years ago, with no releases in the last 12 months. That long silence is strong evidence of abandonment risk for a dependency.
The repository had no commits and no active maintainers in the last 3 months, consistent with the package's long release silence. This materially weakens confidence in maintenance.
Only one registry publishing account is listed, and the project is backed by an individual rather than an organization. This leaves limited visible maintainer capacity alongside the inactive repository.
The repository has 2 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low levels provide little external validation for a package already showing prolonged inactivity.
Composer build tooling is present, but no security scanning tools are reported. The missing scanning is a modest transparency gap, not a severe risk by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 VillainWen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 baidu/aip-sdk Version ^2.2 | — | — |
topthink/framework Version ^6.0 | — | — |
topthink/think-helper Version ^3.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.